CVE-2026-48829

Опубликовано: 24 мая 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

Ссылки

EPSS

Процентиль: 37%

0.00455

Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2026-48829

CVSS3: 7.5

ubuntu

3 месяца назад

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

CVE-2026-48829

CVSS3: 7.5

debian

3 месяца назад

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference af ...

openSUSE-SU-2026:21004-1

suse-cvrf

около 2 месяцев назад

Security update for gsasl

GHSA-5px8-3qcf-qpm5

CVSS3: 7.5

github

3 месяца назад

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

EPSS

Процентиль: 37%

0.00455

Низкий

7.5 High

CVSS3

Дефекты

CWE-476